No Risk Assessment = Cyber Without a Cause